cURL / Mailing Lists / curl-library / Single Mail

curl-library

RE: [PATCH] Fix forcing SSLv3 connections

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Fri, 3 Jan 2014 11:57:39 +0100 (CET)

On Thu, 2 Jan 2014, Steve Holme wrote:

> By simply reading the code... the SSLv2_client_method() would be called in
> the switch/case at line 1431 (my version simply performs the failf(data,
> "OpenSSL was built without SSLv2 support" but if we assume that this isn't
> the case) and then the next switch/case at line 1552 (that Barry has fixed
> for SSL v3) doesn't have a case CURL_SSLVERSION_SSLv2 so will also perform
> failf(data, "Unsupported SSL protocol version").

Ack! Thanks for this accurate analysis. I could confirm this by building with
an OpenSSL version that supports SSLv2, and then I did a little fix and
verified that it now seems able to select SSLv2 again. Then pushed the fix
just now as commit 352916240.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2014-01-03